Enabling the TLS 1.2 Only option on Safeguard, the setting is only configured on the Primary appliance.
Settings | Appliance | Appliance Information | TLS 1.2 Only | Enabled switch.
The TLS 1.2 setting needs to be enabled per appliance, and is not replicated from Primary to Replica.
On the Safeguard Desktop client prior to versions 6.0.8 and 6.8, the "TLS 1.2 Only" switch is greyed out when viewed from a Replica Appliance. As a workaround it is possible to manually change the value in the Safeguard API: